Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/1-JE7kB4Q0ZXPe5-8k2HCknqj1EM.roa
File: 1-JE7kB4Q0ZXPe5-8k2HCknqj1EM.roa (raw, json)
Hash identifier: 5ZPbFTStXLObgoFX0YrOJjeyV78sXNjhYwSjF+P9r+g=
Subject key identifier: F8:91:3B:90:1E:10:D1:95:CF:7B:9F:BC:93:61:C2:92:7A:A3:D4:43
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01932FAC6F2B5F65C6E5828F2E31A2FDE4EE
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/1-JE7kB4Q0ZXPe5-8k2HCknqj1EM.roa
Signing time: Fri 15 Nov 2024 11:54:09 +0000
ROA not before: Fri 15 Nov 2024 11:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 09:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:ac:6f:2b:5f:65:c6:e5:82:8f:2e:31:a2:fd:e4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Nov 15 11:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8913b901e10d195cf7b9fbc9361c2927aa3d443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:d9:26:e7:00:be:34:aa:48:d9:3a:85:ae:
d8:af:2e:de:31:ef:31:03:84:7b:7b:fd:93:70:af:
c5:b3:63:ae:c5:f6:1a:61:c0:5b:c7:09:67:e4:4d:
4c:9a:1c:02:c5:ce:22:a0:8e:0f:5e:b8:c5:95:46:
f0:58:b7:b6:31:87:41:76:84:9e:e3:56:ca:e6:91:
58:ed:aa:85:ff:0a:98:3b:6d:0f:5f:14:d7:9c:a1:
de:09:07:74:22:d6:27:a4:10:58:79:f4:8b:20:08:
7f:86:ad:43:86:8f:8f:06:0c:12:c6:4b:55:9a:93:
c9:07:9f:68:43:33:be:92:63:f2:38:95:eb:16:7f:
ba:fa:92:b2:7d:18:fa:8c:3e:03:c2:d9:e1:6e:63:
f8:d3:ec:2a:5c:5b:20:34:0d:1c:28:99:2e:9c:b3:
ca:04:70:a4:e8:a2:e7:ef:79:6c:52:8f:f0:66:2a:
23:e2:16:fb:fd:0d:2f:76:6c:1d:5d:23:bc:85:92:
5e:73:2b:56:da:6f:62:a0:97:de:7a:98:a7:1a:fb:
06:84:a1:f4:01:14:e7:a8:ac:26:ce:fa:53:69:85:
e9:53:66:aa:1c:1d:82:47:5c:8f:58:0f:2b:30:f6:
71:c0:af:60:ff:a8:6d:db:e8:90:41:fc:7a:ee:46:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:3B:90:1E:10:D1:95:CF:7B:9F:BC:93:61:C2:92:7A:A3:D4:43
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/1-JE7kB4Q0ZXPe5-8k2HCknqj1EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:02:d5:7a:0a:b6:09:f0:45:b2:e1:f9:18:a3:ec:a5:57:9f:
e1:da:79:27:96:d2:6d:5b:a9:ca:6a:6b:8e:af:3b:a4:f1:c5:
df:c7:de:a5:85:b6:ad:0b:4a:0f:b0:c0:52:e6:2b:34:bd:bd:
63:26:7e:f0:da:05:0e:f2:57:1c:d5:f2:a9:05:99:9f:21:0f:
05:31:1d:d4:f1:4c:92:52:2f:ae:c4:85:a9:00:f2:75:a7:df:
d1:f6:14:53:5f:16:c2:07:60:2f:d6:aa:1d:78:5d:d4:8a:5e:
65:41:68:8b:3d:c7:99:5d:69:5c:67:08:c1:d4:7a:9e:6e:3b:
fa:e6:8d:19:ad:78:e4:50:5f:e0:3a:e2:4e:b7:65:59:e3:27:
39:e1:54:1d:66:ad:1f:80:57:57:6d:f4:ec:c0:0b:f2:48:54:
70:e2:c3:22:76:f2:32:21:4b:4b:a0:d3:ee:dd:11:67:80:a6:
74:f1:9e:ed:5b:e8:8a:f3:7a:eb:0e:8b:cd:35:69:72:4c:f3:
25:fa:24:d6:b7:36:97:a0:3a:ef:56:b3:df:ae:18:d7:c9:52:
f5:96:f3:46:bf:2e:b2:13:6a:f8:4b:dc:c7:ae:80:20:2a:7f:
a2:2a:94:66:71:d0:b9:98:79:43:59:54:51:61:ec:45:fb:ef:
87:c5:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 11:06:26 2024 by rpki-client on console-fra.rpki-client.org